Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: dXRpXIHn7ODTwAuoUlXU2R3OPdNxzepjrlgyWNRHilU=
Subject key identifier: 22:5B:B8:1E:CD:36:8F:46:9D:EA:E9:39:16:E0:CC:7E:5F:B3:7F:97
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 019D281665504B7C32C530733A886C924E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 03:00:49 +0000
Manifest this update: Thu 26 Mar 2026 03:00:49 +0000
Manifest next update: Fri 27 Mar 2026 03:00:49 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: 90lwZdd7odcwRMi21dJrIy8JmujvB68u7/up4QNvMQQ=)
2: FtpP7jqiRqsaewteqUCm2wyEXLM.roa (hash: MK0f39W8byL9gsiBPX02BzYZlhRpLBc93Ceao7rPOjg=)
3: hdmcNwLCjDXPBKKvWGbOncZxqck.roa (hash: kfdHlxSK8jc9HQk0SWqjLa4vIJVnr/xdG0pMDu9+AHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:65:50:4b:7c:32:c5:30:73:3a:88:6c:92:4e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Mar 26 03:00:49 2026 GMT
Not After : Mar 27 03:00:49 2026 GMT
Subject: CN=225bb81ecd368f469deae93916e0cc7e5fb37f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6a:18:9f:50:7a:be:e8:2d:eb:ad:de:f7:31:
b5:b1:40:03:f9:1a:2b:8a:f1:3e:b1:a3:ee:b9:d7:
f2:af:35:ec:04:e9:f9:c6:05:b5:b4:dd:79:ec:2c:
4c:2e:55:10:7a:9c:16:0b:f2:72:1e:a3:75:52:d5:
50:54:d9:d6:51:5e:1c:e4:c2:a4:f8:07:43:31:ec:
7a:95:6d:c0:29:b7:cd:a3:ed:24:10:c8:5a:e3:e1:
a1:99:a5:fd:1f:2f:90:0a:8b:c8:a1:65:25:3d:d5:
8b:d1:c2:0a:c7:c1:18:59:85:4b:05:b8:11:f1:cc:
53:1a:18:01:0d:b1:e3:13:01:79:3f:80:69:b0:7d:
ed:29:97:53:a5:9d:62:8b:2d:49:ee:1b:ed:fc:99:
79:ea:ae:85:a2:6e:8d:13:2e:19:84:34:9a:67:98:
ce:dd:dc:b8:6b:0b:72:4b:7c:6e:13:82:fc:20:70:
06:0e:6c:b2:c8:64:b6:b6:90:78:05:9a:8a:9f:c7:
8d:e0:90:ef:86:1a:51:54:2d:a1:2f:90:9e:7d:d8:
16:58:23:13:a1:f8:2a:e0:fb:e1:35:cf:47:be:30:
c7:28:0c:16:28:55:66:51:6a:90:84:dd:7d:c9:8b:
f1:38:dc:5c:85:00:70:4e:df:40:41:06:b7:8b:e7:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5B:B8:1E:CD:36:8F:46:9D:EA:E9:39:16:E0:CC:7E:5F:B3:7F:97
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:38:f2:54:4e:71:7b:dd:68:a2:53:e2:e3:b9:39:5e:04:8d:
61:87:15:3e:37:9c:08:70:4e:80:29:26:dc:14:9b:c7:80:ad:
30:79:03:14:da:63:a3:0e:31:6a:79:62:1c:20:37:cd:d4:f7:
ee:9d:96:fd:c3:02:8a:5d:8f:92:8a:8a:e5:3e:85:9b:08:77:
30:aa:70:9a:c5:fa:e8:61:12:29:b7:82:07:dc:73:dd:e6:88:
f9:f8:f7:53:31:86:00:af:a9:d7:75:ba:6d:6b:62:4d:e3:c0:
b1:f8:7c:3c:8d:8e:a1:e2:79:05:31:99:ec:30:b6:c8:c6:39:
a0:42:3e:3c:d3:6e:2f:80:36:e7:7e:11:c0:93:6f:09:22:fd:
af:b9:a9:f0:68:ed:78:5f:93:4a:dd:bb:77:09:b0:c8:12:4e:
d0:a7:55:90:90:09:20:ab:ed:ba:6a:ca:4e:1b:26:21:da:a2:
42:63:28:27:1c:46:ac:56:09:24:63:ea:ea:9a:c0:9d:95:9d:
52:1f:11:58:9f:94:06:0a:09:c4:51:6d:c0:ca:db:e6:d5:2f:
3e:21:75:fa:a7:fc:b1:8e:b9:d5:53:af:8d:e3:68:e5:d9:51:
ff:f7:1a:65:20:ef:56:3f:18:3c:5b:62:f0:b1:88:ed:65:b3:
4b:43:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:51:57 2026 by rpki-client